SC-001 - BitLocker Recovery Keys Extractor

What it does Extracts BitLocker recovery keys from all locally protected volumes and saves them to a timestamped file at C:\Temp\BitLockerKeys_YYYYMMDD_HHMMSS.txt. Useful for: Auditing BitLocker key availability before a device is reprovisioned Manual verification when keys have not escrowed correctly to Entra ID / Intune Local key recovery in offline or unmanaged environments Requirements Windows 10/11 or Windows Server with BitLocker module available PowerShell run as Administrator BitLocker active on at least one volume Source Script available on GitHub: ...

August 3, 2026 · 1 min · Tony Merisan

POL-SEC-002 - Unauthorized Browser Use Policy: Brave

Free template. This policy is provided as a starting point for IT and security teams. Adapt it to your organisation’s needs, jurisdiction, and tooling. Attribution appreciated but not required. Document Information Reference POL-SEC-002 Version 1.0 Issue Date August 2026 Scope All employees and contractors Classification Internal Use Owner IT Department / Cybersecurity Next Review August 2027 1. Purpose This policy defines the organisation’s position on the use of Brave browser on corporate endpoints and establishes the rules for browser software management across the work environment. ...

August 1, 2026 · 5 min · Tony Merisan

POL-SEC-003 - Chrome Browser Personal Account Usage on Corporate Devices

Free template. This policy is provided as a starting point for IT and security teams. Adapt it to your organisation’s needs, jurisdiction, and tooling. Attribution appreciated but not required. Document Information Reference POL-SEC-003 Version 1.0 Issue Date August 2026 Scope All employees and contractors Classification Internal Use Owner IT Department / Cybersecurity Next Review August 2027 1. Purpose This policy defines the rules for the use of Google Chrome on corporate endpoints, specifically addressing the risk of employees signing into Chrome with personal Google accounts and storing corporate credentials, financial data, and sensitive information within those personal accounts. ...

August 1, 2026 · 7 min · Tony Merisan